Examkin

Soru

Zorluk: KolayAzure Role-Based Access Control (RBAC)

An organization wants to restrict its developers so they can only deploy virtual machines of a specific size. Is the statement that the administrator should assign a custom Azure Role-Based Access Control (RBAC) role to enforce this resource size restriction true or false?

Cevap: Cevap

Cevap

False
The statement is false because Azure RBAC is used to manage access permissions (who can perform actions on resources), whereas Azure Policy is used to enforce resource properties and compliance constraints (such as restricting the allowed sizes of virtual machines).

Adım Adım Çözüm

1
Identify the goal: restrict developers to deploying only specific virtual machine sizes.
This is a resource configuration constraint.
Analyzing the scenario requirements determines what type of governance action is needed.
2
Evaluate Azure RBAC functionality.
Azure RBAC manages user authorization (who can perform actions like create, read, update, or delete on resources). It does not control resource properties like VM size.
Determining if the proposed tool (RBAC) can fulfill the goal.
3
Evaluate Azure Policy functionality.
Azure Policy enforces resource properties and compliance, such as restricting allowed SKU sizes during deployment.
Identifying the correct Azure service for resource-level restrictions.
4
Conclude whether the statement is true or false.
Since Azure RBAC cannot enforce VM size restrictions and Azure Policy must be used instead, the statement is false.
Determining the final answer based on service capabilities.

Anahtar Kavram

Azure RBAC vs. Azure Policy
Bu soruyu puanla

Konular

Azure Role-Based Access Control (RBAC)

Bu konudan daha fazla soru